include/net/netfilter/nf_conntrack_labels.h

   1 #include <linux/types.h>
   2 #include <net/net_namespace.h>
   3 #include <linux/netfilter/nf_conntrack_common.h>
   4 #include <linux/netfilter/nf_conntrack_tuple_common.h>
   5 #include <net/netfilter/nf_conntrack.h>
   6 #include <net/netfilter/nf_conntrack_extend.h>
   7
   8 #include <uapi/linux/netfilter/xt_connlabel.h>
   9
  10 struct nf_conn_labels {
  11         u8 words;
  12         unsigned long bits[];
  13 };
  14
  15 static inline struct nf_conn_labels *nf_ct_labels_find(const struct nf_conn *ct)
  16 {
  17 #ifdef CONFIG_NF_CONNTRACK_LABELS
  18         return nf_ct_ext_find(ct, NF_CT_EXT_LABELS);
  19 #else
  20         return NULL;
  21 #endif
  22 }
  23
  24 static inline struct nf_conn_labels *nf_ct_labels_ext_add(struct nf_conn *ct)
  25 {
  26 #ifdef CONFIG_NF_CONNTRACK_LABELS
  27         struct nf_conn_labels *cl_ext;
  28         struct net *net = nf_ct_net(ct);
  29         u8 words;
  30
  31         words = ACCESS_ONCE(net->ct.label_words);
  32         if (words == 0 || WARN_ON_ONCE(words > 8))
  33                 return NULL;
  34
  35         cl_ext = nf_ct_ext_add_length(ct, NF_CT_EXT_LABELS,
  36                                       words * sizeof(long), GFP_ATOMIC);
  37         if (cl_ext != NULL)
  38                 cl_ext->words = words;
  39
  40         return cl_ext;
  41 #else
  42         return NULL;
  43 #endif
  44 }
  45
  46 bool nf_connlabel_match(const struct nf_conn *ct, u16 bit);
  47 int nf_connlabel_set(struct nf_conn *ct, u16 bit);
  48
  49 int nf_connlabels_replace(struct nf_conn *ct,
  50                           const u32 *data, const u32 *mask, unsigned int words);
  51
  52 #ifdef CONFIG_NF_CONNTRACK_LABELS
  53 int nf_conntrack_labels_init(struct net *net);
  54 void nf_conntrack_labels_fini(struct net *net);
  55 #else
  56 static inline int nf_conntrack_labels_init(struct net *n) { return 0; }
  57 static inline void nf_conntrack_labels_fini(struct net *net) {}
  58 #endif